{"report_id":"2e7e81f1-7ce7-4542-9b13-610ebd5c0d1c","version":6,"status":"done","tags":[],"date":"2026-02-21T21:13:32Z","url":{"schema":"https","addr":"tripskans.cc/","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"104.21.42.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tripskans.cc/","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"title":"ТрипСкан - рабочие зеркала, актуальные ссылки и быстрый доступ","dom":{"size":25256,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1709)","md5":"a6ad27e33964a08fb854d19fa14055dd","sha1":"e2ace22d499576249751716287dd260d12aa7431","sha256":"c84b9615b552aba32754cc4303c699033373e48d6a90eaf787360eba2bbe6efc","sha512":"03286a162173ea2aecd2ef66b52c144e7227bc6c4bc774c59429542962a2b85ff124a476f852fba8f7b0f14af8e37dfb920854858d0e8a9e1c73aade740a21bb","ssdeep":"384:OE665gN+lUr8X/4hs7RF+Qpw4B5/h+aMrzxF:OE665ggvX/4ODVb/h61F","tlshash":"d2b2833151f804da1102a597f8197b0f7de694bfae5a421132bc2ead7fe3869cc27309","dom_hash":"domhashb69e3e25c5eae7b82acb1dd10ecdd82b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tripskans.cc/","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"104.21.42.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:13:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":10842,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tripskans.cc","ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-21T20:25:11.111846Z","last_seen":"2026-02-21T20:25:11.111846Z","alert_count":9,"request_count":9,"received_data":224226,"sent_data":3963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":2,"received_data":174587,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":5,"received_data":199283,"sent_data":2851,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tripskans.cc/js/script.js","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0085ad8aa375f9226f4aad900bf74ac0","sha1":"4f2f49b306be5f6c2335561768dd9cbe7fc6d460","sha256":"7e3fa44e673d084a4614b259b2ee027392bcda5f0a1fce5f1a0f75ab621e1138","sha512":"34e464568dc3eec92b05f63a93f8646262c8466ab85fd84deba82cb6a406d8ff7e34319c3384fedbf6641dedc2366aa0ab8610750f93da470e85fba8a94bb7ea","ssdeep":"192:LTmpM7N86UazNP3F3VDRetE+q4ZPlCypBaRitnvI9Z:LwM7N86UazN/F3VV9ClCypYitnvIH","tlshash":"f4d13464213502b7823bd33bd75e4749f461207f7a42c21af97cda492ff2812e1a6de9","size":6747,"data":"","first_seen":"2026-02-21T20:25:15.13617Z","last_seen":"2026-02-21T21:13:34.103317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-08T05:36:11.633498Z","times_seen":22057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:13:11 GMT\r\ndate: Sat, 21 Feb 2026 21:13:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10156,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d644fb279c96416b17fa9283f1cb9ed9","sha1":"b9e0798d95503aacaf396c70afd9c0d43224a696","sha256":"b292d5ad0ac6be484cec76a6bf70691db15e40001f0294ca90d7ce7d1c0b94ff","sha512":"634a45351f5d18b96c222f2e29fc880c7979f56d6cf26abd8be15bcfe3b8c25676f400ffd7c4ed662661ece8b72b504f635f37dcb90f21b316d81619725af905","ssdeep":"192:JHZdl3gkLTHHi2l3fTLkWHTnl3uiLZ9HkIl3VZLiQ:ZlHH1BjfP","tlshash":"4b22cb64806a6480aa031dc233cf3f329d5e64516485d6bd5ffd2db49cafe366261b0c","first_seen":"2025-09-12T09:04:13.411062Z","last_seen":"2026-06-08T06:20:11.016841Z","times_seen":190,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":180,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/js/script.js","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fa3yNLBoZtbgdKYm6Idq14qMIAERuIDg0%2FG9n83S%2BbxcoC5JfNfS8A2K%2FhJYtJBld3NL49zJHwyt6CXotVkVoeLyJsm%2BcxK05q1WDQ%3D%3D\"}]}\r\nlast-modified: Tue, 10 Feb 2026 00:19:05 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698a7979-1a5b\"\r\ncf-ray: 9d193f02e84be07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6747,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (378), with CRLF line terminators","md5":"0085ad8aa375f9226f4aad900bf74ac0","sha1":"4f2f49b306be5f6c2335561768dd9cbe7fc6d460","sha256":"7e3fa44e673d084a4614b259b2ee027392bcda5f0a1fce5f1a0f75ab621e1138","sha512":"34e464568dc3eec92b05f63a93f8646262c8466ab85fd84deba82cb6a406d8ff7e34319c3384fedbf6641dedc2366aa0ab8610750f93da470e85fba8a94bb7ea","ssdeep":"192:LTmpM7N86UazNP3F3VDRetE+q4ZPlCypBaRitnvI9Z:LwM7N86UazN/F3VV9ClCypYitnvIH","tlshash":"f4d13464213502b7823bd33bd75e4749f461207f7a42c21af97cda492ff2812e1a6de9","first_seen":"2026-02-21T20:25:15.13617Z","last_seen":"2026-02-21T21:13:34.103317Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/css/style.css?v=26012026","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /css/style.css?v=26012026 HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDK%2FtblrKxwk%2F5%2BO%2FN73c3il1Cm77%2BuWqjVjPaKPFVXNfjjv1DqBFkQyk1AoC5s33dLIvx%2BLQ%2FDxrjoskRBIX9ffI4TLFzCfC4AreQ%3D%3D\"}]}\r\nlast-modified: Tue, 10 Feb 2026 18:35:14 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698b7a62-462e\"\r\ncf-ray: 9d193f02c843e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4e23ca973bfd100c35f41f1d38dc33cb","sha1":"2ecc1c9ad446652d07fa504becc6f26a1fea0673","sha256":"6839d087fd0d47a0616635a3b861e6e5bcda616ff30f6c939c40aa35c9013e22","sha512":"02e3f4ab7b4c6971c9902d8101172401a20f7bb9232232a867ff555543a20432efd33ecd3ca99c3d5db0833945f8529b686beec213a3de7cc3f22c1e36899218","ssdeep":"192:9LlyBcOIvEyjuOwq/ACKiMKlK+x5segHVfcBccoCo+lj8CCXyuVnCUjwUjUUjp:DGCELOlwJDHVfcBcc1zelBp","tlshash":"4a820ea612660204791bd8049fd65b67a3bcc013860ffaf5bece540c8fcb6c995d279e","first_seen":"2026-02-21T20:25:15.131405Z","last_seen":"2026-02-21T21:13:34.104091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\nage: 41629\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-08T05:36:11.633498Z","times_seen":22057,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tripskans.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:59:13 GMT\r\nexpires: Sat, 20 Feb 2027 02:59:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152038\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-06-08T06:24:33.9674Z","times_seen":7833,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":96,"dns":1,"connect":7,"send":0,"wait":9,"receive":29,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxaKYbSAYZgVNW7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxaKYbSAYZgVNW7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tripskans.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:36:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:36:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 153398\r\nlast-modified: Mon, 08 Sep 2025 18:07:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29412, version 1.0","md5":"793d262b423eb681ccd6d2692b969d3e","sha1":"1f801d34a9445d83f2676aec0397a08002759c0f","sha256":"7c12230666afd6059d45bf417a301a03f91a8168abf289df69ff30023fdf09a1","sha512":"654da1d05a8e228b66d92ebe9e7f780c4b26f438e678f150837621a81e7a0a833cc8b2e70aa70bc363591da6403a8045a5d85622fa5a3cb13701486faa0018f1","ssdeep":"768:0YuXmmgsJkQG5YDelj/q9Iwz1ARVxdEZx/fdDjd:0xvcQG5mgqawzoxdOXjd","tlshash":"f6d2f1e9bf02b1d1dc2ba555253cc0a0a67b0727410ed34f32de86ecce5b3855366b86","first_seen":"2025-02-18T07:50:21.912663Z","last_seen":"2026-06-07T05:03:02.437172Z","times_seen":252,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":215,"dns":4,"connect":21,"send":0,"wait":9,"receive":2,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tripskans.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:59:13 GMT\r\nexpires: Sat, 20 Feb 2027 02:59:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152038\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-06-08T06:24:33.9674Z","times_seen":7833,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":83,"dns":2,"connect":26,"send":0,"wait":43,"receive":7,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxaKYbSAYZgVNW7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxaKYbSAYZgVNW7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tripskans.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:36:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:36:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 153398\r\nlast-modified: Mon, 08 Sep 2025 18:07:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29412, version 1.0","md5":"793d262b423eb681ccd6d2692b969d3e","sha1":"1f801d34a9445d83f2676aec0397a08002759c0f","sha256":"7c12230666afd6059d45bf417a301a03f91a8168abf289df69ff30023fdf09a1","sha512":"654da1d05a8e228b66d92ebe9e7f780c4b26f438e678f150837621a81e7a0a833cc8b2e70aa70bc363591da6403a8045a5d85622fa5a3cb13701486faa0018f1","ssdeep":"768:0YuXmmgsJkQG5YDelj/q9Iwz1ARVxdEZx/fdDjd:0xvcQG5mgqawzoxdOXjd","tlshash":"f6d2f1e9bf02b1d1dc2ba555253cc0a0a67b0727410ed34f32de86ecce5b3855366b86","first_seen":"2025-02-18T07:50:21.912663Z","last_seen":"2026-06-07T05:03:02.437172Z","times_seen":252,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":243,"dns":2,"connect":23,"send":0,"wait":12,"receive":5,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:13:10.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BauqpsxK84jvdA0rUax2cUnBDQBr0YAXaKZPGQTymaNqsnB8ZHtgCZri7qIyqY3J64H9PjXgAyrfzRfqrTj8vW24zeg8%2BBmnnM4pA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d193efe68a8c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25104,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1709), with CRLF line terminators","md5":"83e0e786c612ac060d8eab4abf860ae7","sha1":"f35399f1a925f31803995ab011917b809d3af0f5","sha256":"330518fbf25ae6792dabf8dc7f192f073965682f2903d4bdc81378f66ce62d99","sha512":"a9dbde1f563078510c704141db57eb7a8b0ba94a8fc36241f4925769f1d2bc4a54a59b0846a8b467be79b850bbb46b2540a954720876a9b1811dd8f9e45c3a06","ssdeep":"384:7iB5atNzlUrrJsyRPJgNwnBXinkaLJyah:7iB5atxK2oLhin/3h","tlshash":"82b2513251c9549a1133e59bec197b4efea644bfab56421231bc3aaf3ff2424cc13648","first_seen":"2026-02-21T20:25:15.12918Z","last_seen":"2026-02-21T21:13:34.106956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":75,"dns":26,"connect":9,"send":0,"wait":399,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/slide1.png","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/slide1.png HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 45149\r\nlast-modified: Mon, 05 Jan 2026 18:23:31 GMT\r\npriority: u=4,i=?0\r\netag: \"695c01a3-b05d\"\r\naccept-ranges: bytes\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yGzmbmY4%2BCN2vDBc%2B3ZV5bYTXF7tikweeQe3OSMc9AFT7VvMm63veciLKsetOIGNTkJ%2Fw%2FIqySat%2FvADpJKO8G0qvCd40CrtexpoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193f02d846e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 850 x 270, 8-bit/color RGB, non-interlaced","md5":"cf80d6bcd8a5b3c724744fcb7ba9fd81","sha1":"9a7e5e87b294776e83fea19b8d22640119dae385","sha256":"dd271cf9c8d3cbc714a0c44fbf4b132f7661c9798eb03e476ed43f53070794a5","sha512":"400a3402dc9b39f0ef4c501dff03e5e0c01c14323db1e07d6a6f9a5c939eab3d249ce0dbfc198fdad0451e8affad73421a0fbbaa3707ef382b94eeaf17e706cf","ssdeep":"768:Q2LgVFqsnss4cG+CZtrL0SdimTbJuKx+O+e+TN6ago6jGSmAXLHSN:QsgzM/Tbrxbs6an6KSmAXLHa","tlshash":"bb13f162ecda4ce2c4573cb60c97188f30f349235dc511ca52a198672e6beb4ca757cb","first_seen":"2026-02-21T20:25:15.133397Z","last_seen":"2026-05-08T21:50:07.518326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/slide2.png","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/slide2.png HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 43709\r\nlast-modified: Mon, 05 Jan 2026 17:56:49 GMT\r\npriority: u=4,i=?0\r\netag: \"695bfb61-aabd\"\r\naccept-ranges: bytes\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egXI%2FtOQTKLohFikb6do78VXWmB2nq6ONcNX9mdkocRJrfIXL1cVR62LPlq%2Fgr%2FB7Rm3UERoeMbeNCuHweJa62bzFL6061p1tPdB%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193f02d848e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 850 x 270, 8-bit/color RGB, non-interlaced","md5":"3c5caf7e3f92d015c81a000480bc9a11","sha1":"43dd73415999888d02f9544c30cea331ad820dbf","sha256":"2e87f672cc0aeda88bd6f15ac812de96a525e131490ac98fdb295cdf169caec5","sha512":"d0d57fedf20a44df0bb7b0f9059d6bdbc1a398b613e06a33236e93ab0bb35bba52171d70ed7c423af378b9b60e2999d04f6200b2c394d9abc17a0a41522defeb","ssdeep":"768:l2mgTyFdr8YWYzL/M8a+46V+SpRZ2HX2VS78TWRAQ4flUc7qiS:l2mg48BY/U8ckrpDV1QT","tlshash":"b913f17c9aaea7b4ee1e90390be8194d83330302d8d6aad5c7654dd7cdba9e01dc5037","first_seen":"2026-02-21T20:25:15.140334Z","last_seen":"2026-05-08T21:50:07.519888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tripskans.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:59:13 GMT\r\nexpires: Sat, 20 Feb 2027 02:59:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152038\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-06-08T06:24:33.9674Z","times_seen":7833,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":247,"dns":9,"connect":30,"send":0,"wait":8,"receive":6,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/favicon.svg","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:11 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ss3O79CNKSj9dzTa2Wk1lmeIw8cjDhO3LOBYpHeYSdKtsCREQKYfvpdR9ZoixW2Jsjvgw1f0nIckMa7%2B3TMXSqgChHsZz21hzPvFGw%3D%3D\"}]}\r\nlast-modified: Sun, 26 Jan 2025 17:46:48 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"67967508-554\"\r\ncf-ray: 9d193f073980e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bda3ecc90d5db9b7bd5fc7148aa7b54","sha1":"da1dc1d289187b3334657a8b12717cca17dad988","sha256":"ddea2d7b346038d15345b1e9bf7268b96fa6c37f5d32a2804c69597289c1fc8e","sha512":"6e9da68fc2264afc6eb064803331c9936cb8a3d1a3aec4ed17718fa06903c5db2a679f5fca0a5a9556dbe133946bace778be2e7ef7635da491056a6e88a1ae77","ssdeep":"","tlshash":"26215ae9b1a9d180e40a8731da1fe07a902231fd6e5540d0585177317a959bb4c3ffd4","first_seen":"2025-04-22T07:24:42.793235Z","last_seen":"2026-03-17T19:59:21.588592Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/apple-touch-icon.png","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:11.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/apple-touch-icon.png HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 21 Feb 2026 20:24:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93n70lORn4hpF0VNiqZ9Cg63Bwf00J4GSCLlfQBikmObF5WR%2BSQhyMOdGV5tlN%2F3hhO1hK%2BhI%2FTyt%2BlpS1EQ9yDiUXKweuwmF0BB0Q%3D%3D\"}]}\r\ncf-ray: 9d193f07397ee07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":25104,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1709), with CRLF line terminators","md5":"83e0e786c612ac060d8eab4abf860ae7","sha1":"f35399f1a925f31803995ab011917b809d3af0f5","sha256":"330518fbf25ae6792dabf8dc7f192f073965682f2903d4bdc81378f66ce62d99","sha512":"a9dbde1f563078510c704141db57eb7a8b0ba94a8fc36241f4925769f1d2bc4a54a59b0846a8b467be79b850bbb46b2540a954720876a9b1811dd8f9e45c3a06","ssdeep":"384:7iB5atNzlUrrJsyRPJgNwnBXinkaLJyah:7iB5atxK2oLhin/3h","tlshash":"82b2513251c9549a1133e59bec197b4efea644bfab56421231bc3aaf3ff2424cc13648","first_seen":"2026-02-21T20:25:15.12918Z","last_seen":"2026-02-21T21:13:34.106956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/slide3.png","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/slide3.png HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 45182\r\nlast-modified: Mon, 05 Jan 2026 17:49:30 GMT\r\npriority: u=4,i=?0\r\netag: \"695bf9aa-b07e\"\r\naccept-ranges: bytes\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDSciBXWjp6UyCAJhr1CM3ycqfwhQFCHPkphFrhELz8nHiwMinTDjCgmoDB3wb23%2BkW7wmoGPRdJUC34jVE3OX7cIZB2A10dPz4Czw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193f02e84ae07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 850 x 270, 8-bit/color RGB, non-interlaced","md5":"724e82c29503b269cffdef75e0412e3f","sha1":"897c127130c378bf81ebd840b5e6b0ab99566fc3","sha256":"8ec5a81cf9bbb9d7f01d3270540d50e37823aee04db41f8c513e9377adb9087c","sha512":"921515fae5daae25e390126cd647ae7f89ce0a73298d5c94916041f9291beaf8394f2af6bfd0cd3aba41486717c4ddbb2336634dc723f3c2fc87fc94b0b7ee08","ssdeep":"768:lslPYuMlzNTLwEM+Ly6k7SpUvBpWp8xfX298LHU9mxnUS8EbPKmpD5GcyzV:la5Mb8+zBWprM8LqmxtPhNuV","tlshash":"2d13f19ae4e2d335ff7f577259f22a54a1834445e43e8090a083d293826fdbc1fe0e59","first_seen":"2026-02-21T20:25:15.117526Z","last_seen":"2026-05-08T21:50:07.541547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\nage: 24880\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-06-08T05:36:11.663817Z","times_seen":21585,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":30,"dns":1,"connect":16,"send":0,"wait":16,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tripskans.cc/images/logo-ny.png","fqdn":"tripskans.cc","domain":"tripskans.cc","tld":"cc"},"ip":{"addr":"172.67.156.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tripskans.cc/","date":"2026-02-21T21:13:10.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripskans.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:31:48 GMT","end":"Mon, 11 May 2026 20:17:36 GMT"},"fingerprint":{"sha1":"71:CF:1C:67:89:4F:3D:62:C4:E4:F5:5D:78:32:E6:31:FA:92:90:AB","sha256":"4E:2A:78:65:95:0E:64:70:9D:73:D3:90:3C:F1:34:23:80:4D:4E:15:51:2D:71:74:42:48:8F:17:6E:C3:8E:B6"}}},"request":{"raw":"GET /images/logo-ny.png HTTP/1.1\r\nHost: tripskans.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tripskans.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:13:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7964\r\nlast-modified: Wed, 24 Dec 2025 16:52:48 GMT\r\npriority: u=4,i=?0\r\netag: \"694c1a60-1f1c\"\r\naccept-ranges: bytes\r\nage: 2915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7ZKXCfsg10zWwH7pRoYPzjvvEJd6XUsZq5KHxtRnFljwr2IsgG3DA3TYcXnXPznPoEuv9ZSMFMaIz%2FfT4EM%2FwbQ2HhcxHjCCO5QtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d193f02d845e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 443 x 116, 8-bit/color RGBA, non-interlaced","md5":"ac69761314070b03847f50856b6b006f","sha1":"28e0a8500f27dda1aa75c8ed86338aeb3eae24a7","sha256":"1cd03b173bcb6ac703b0d2002c9d2d70c039b121dbc1318117c3e8f1b3b3f8db","sha512":"6aabdfdeed776fa12f39795eccafd53ea31da8d5d4c2dc6548e8538d7627ba9c214fea14b419885963fb8e9cb6c59edc00bf3ae56a8982cda62e0a7579137f32","ssdeep":"192:LnYsxoEdjuTq5rv7ggmsUZAdZTqWvcpuu5:LYsSGjufgm5ZAn215","tlshash":"16f18edeedc97a66a9e7ce9431e02900272309e10a47342af4d285097d982e99bf61dc","first_seen":"2026-01-07T08:18:34.206098Z","last_seen":"2026-02-27T06:49:48.394193Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"tripskans.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}